Return
-
Title
Migrated and synchronized accounts can be created successfully but are not mailbox-enabled -
Description
Accounts that are created in the new domain via the sync are not mailbox enabled. There are no issue in creating or modifying them through QMM so it's not a permission issue. However none of mail-related attributes are being populated. There's Exchange on-prem in the target domain and it's not a hybrid. -
Cause
Sentinel One security software -
Resolution
When analyzing DSA log, it's clearly seen that DSA is trying to populate all mail-related attributes, however only handful or them look normal and majority are marked R/O (read-only).
The issue was traced to the Sentinel One security software, which blocked attributes' modifications. Please either disable that software on the domain controller, specified as "preferred DC/GC" in DSA properties in Agent Manager, or work with the software vendor to resolve attributes modifications blockings.